account.hcl 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293
  1. # Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
  2. # terragrunt.hcl configuration.
  3. locals {
  4. account_name = "legacy-mdr-test"
  5. account_alias = "" # No alias for legacy
  6. aws_account_id = "527700175026"
  7. instance_termination_protection = true # set to true for production!
  8. splunk_prefix = "moose"
  9. account_tags = {
  10. "Client": local.splunk_prefix
  11. }
  12. c2_account_standards_path = "../../mdr-test-c2/005-account-standards-c2"
  13. # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  14. vpc_info = {} # "TODO"
  15. # For testing
  16. create_test_instance = false
  17. test_instance_key_name = "TODO" # They with which to provision the test instance
  18. aws_waf_logs_hec_token = "FA38B8DD-1398-46D0-BD79-BA046C6064B0"
  19. # Legacy accounts have some extra key users
  20. is_legacy = true
  21. extra_ebs_key_admins = [
  22. "arn:aws:iam::527700175026:root",
  23. "arn:aws:iam::527700175026:role/mdr_iam_admins",
  24. "arn:aws:iam::527700175026:role/mdr_powerusers"
  25. ]
  26. extra_ebs_key_users = [
  27. "arn:aws:iam::527700175026:role/mdr_powerusers",
  28. "arn:aws:iam::527700175026:role/msoc-default-instance-role",
  29. "arn:aws:iam::527700175026:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
  30. "arn:aws:iam::527700175026:role/portal-instance-role",
  31. "arn:aws:iam::527700175026:role/mdr_iam_admins"
  32. ]
  33. extra_ebs_key_attachers = [
  34. "arn:aws:iam::527700175026:role/mdr_powerusers",
  35. "arn:aws:iam::527700175026:role/msoc-default-instance-role",
  36. "arn:aws:iam::527700175026:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
  37. "arn:aws:iam::527700175026:role/portal-instance-role",
  38. ]
  39. # Legacy information
  40. # legacy_vpc information is required to connect the VPCs to the transit gateway.
  41. legacy_vpcs = {
  42. main_infrastructure = {
  43. id = "vpc-0b455a7f22a13412b",
  44. private_subnets = [ "subnet-053c6f1b9a48d4285", "subnet-047cba9290bc502fd", "subnet-01d13857b6f3899cb" ]
  45. public_subnets = [ "subnet-0b1e9d82bcd8c0a2c", "subnet-0d65c22aa4f76b634", "subnet-07312c554fb87e4b5" ]
  46. private_route_tables = [ "rtb-0effbd34d78eabe6f", "rtb-02e8aaa2e4b82a665", "rtb-00928b94222c589a4" ]
  47. public_route_tables = [ "rtb-022461b2a3c523e73" ]
  48. }
  49. ma-c19 = {
  50. id = "vpc-03522ef9cbaef2378",
  51. private_subnets = [ "subnet-0045fcb58b3ec017c", "subnet-05150379ec0cc4181", "subnet-0b4a35031fd20dcfb" ]
  52. public_subnets = [ "subnet-0dee7a137d1598c4b", "subnet-0cc302d548e97188d", "subnet-0947439d65a8b54e2" ]
  53. private_route_tables = [ "rtb-01ad15c283474922a", "rtb-09be121675ff21a20", "rtb-08969d2fb85c343bb" ]
  54. public_route_tables = [ "rtb-0d94202396743c4a5" ]
  55. }
  56. customer-portal = {
  57. id = "vpc-075e58bd7619dc5b0",
  58. private_subnets = [ "subnet-0f8eec82a17cef7a6", "subnet-02575f16e22431ad6", "subnet-0662ad00a4fbf3034" ]
  59. public_subnets = [ "subnet-0bbb38f6b222607cf", "subnet-03074b876845ebae4", "subnet-0177f1e226cb5bc55" ]
  60. private_route_tables = [ "rtb-033ada297a85c58fe", "rtb-08e28c3117db6b282", "rtb-04700e9a72f266287" ]
  61. public_route_tables = [ "rtb-0e26a4fa3833eaa96" ]
  62. }
  63. afs = {
  64. id = "vpc-0bb514965e384f13a",
  65. private_subnets = [ "subnet-0db1488cd94ad0b38", "subnet-0275d50060a77e726", "subnet-07a0c3f2ee215d5f1" ]
  66. public_subnets = [ "subnet-05153a99ddb83712c", "subnet-044cf67369cee4967", "subnet-0bb9ec330ead3bab3" ]
  67. private_route_tables = [ "rtb-0f1ba98c1ce4a1306", "rtb-0861949990769ea9c", "rtb-00c008cd8a03f9a0d" ]
  68. public_route_tables = [ "rtb-09261ab694d10ed4e" ]
  69. }
  70. la-c19 = {
  71. id = "vpc-0ce10fb98f1e9a078",
  72. private_subnets = [ "subnet-02ab0934a1161cd38", "subnet-07197e8b1661a3006", "subnet-00135f6f54e0ee4fc" ]
  73. public_subnets = [ "subnet-0d0ef745c05339043", "subnet-01ab62a37d5c40eb3", "subnet-081ded06d577fd57d" ]
  74. private_route_tables = [ "rtb-098d239c29c96fb03", "rtb-0cd81b36f75e817e7", "rtb-06b060305a96cfab4" ]
  75. public_route_tables = [ "rtb-0ca9389c1f764ced5" ]
  76. }
  77. dc-c19 = {
  78. id = "vpc-0f64ba0a5c72b7402",
  79. private_subnets = [ "subnet-01973d25e80bc4341", "subnet-0e2d94b352495b3c1", "subnet-0f68328639ccb8754" ]
  80. public_subnets = [ "subnet-04188a43516592efa", "subnet-0a9b6fa8860a05751", "subnet-0281a55f386cf58f2" ]
  81. private_route_tables = [ "rtb-0f4babc621c88a81c", "rtb-093ce14bd550edfd2", "rtb-06e4a2609b3c63320" ]
  82. public_route_tables = [ "rtb-0caf65533eea2f16c" ]
  83. }
  84. }
  85. # Qualys Connector
  86. qualys_connector_externalid = "1601947413043" # Needs to come from the qualys console
  87. }